temporarily removed check for token validity
changed client api to return objects instead of json